$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9f2599f-0708-3180-b312-21d53cd0ef8c.roa File: a9f2599f-0708-3180-b312-21d53cd0ef8c.roa (raw, json) Hash identifier: iaK25nicp6IXVwTPogfGu7jGKluR641y032HMY+UbZg= Subject key identifier: 04:D3:D5:54:D1:83:7A:94:29:31:3D:EE:81:7F:9A:55:B2:EE:9F:2E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D2A74D7BDBBCF9CEBDC513410 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9f2599f-0708-3180-b312-21d53cd0ef8c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d7:bd:bb:cf:9c:eb:dc:51:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=b906368e-8628-4bf9-b96f-c6f73188ee59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:05:52:ee:3e:bf:f3:ff:1b:e5:03:b1:c3: 09:a2:ab:35:20:d0:79:48:f2:2c:82:a1:c7:bd:65: 29:36:00:7b:14:ee:80:d6:33:0a:6e:09:8e:02:e0: 56:c6:b3:9f:f5:a5:8a:58:82:46:ee:68:64:b0:02: f5:6b:84:4d:ce:08:ef:5b:62:d0:b6:51:59:29:d2: 62:81:f3:76:e0:2a:6e:21:4e:cc:6c:75:71:71:1f: dd:f5:ca:07:36:ba:9c:9d:75:0a:74:c2:8c:7b:ac: af:a9:1c:99:89:5f:d8:a0:f4:9b:7c:5c:c3:f4:68: 68:f7:84:8d:e4:e3:78:72:31:9d:90:49:2b:77:a3: db:bd:d0:62:7b:d1:8b:9e:a5:de:a3:4c:90:71:57: b1:88:d7:ae:33:46:a1:18:1e:98:8b:2b:30:3f:d8: be:a4:6a:c7:e3:74:9f:2e:6b:d9:47:d9:53:96:4b: c8:24:90:8c:ed:fd:35:ca:59:a7:7e:d8:83:23:8b: f2:1f:f4:84:94:35:4f:d5:8d:28:46:0e:bd:f4:21: b2:3b:cc:94:fd:76:de:a5:bd:05:73:c4:c3:12:c8: 50:89:e7:c4:80:fb:f7:4d:8d:94:37:e7:3c:22:ea: 3d:95:1c:a4:00:db:df:9c:ee:e5:92:ed:23:d7:0e: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D3:D5:54:D1:83:7A:94:29:31:3D:EE:81:7F:9A:55:B2:EE:9F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9f2599f-0708-3180-b312-21d53cd0ef8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:7a:70:52:3b:f0:00:2a:06:79:ce:25:ea:22:6d:92:00:0c: 7d:8f:b5:e5:a6:19:2d:78:b2:3a:f5:9d:2a:31:69:33:3e:1a: 4d:fc:f6:de:46:ac:b9:95:c8:78:38:2d:a0:bc:0f:17:ba:8d: a0:05:63:62:0a:45:fa:29:9f:dd:d7:ce:35:26:48:38:3b:19: 14:2e:26:0e:5f:9a:0c:be:2c:e8:0d:0f:60:1e:ef:3d:ec:95: f2:ce:05:e6:2b:80:98:ac:a3:c8:b0:e2:1d:f0:cc:b7:d5:61: e7:e5:16:17:48:d1:c7:fe:37:1d:51:28:31:e1:d1:26:f6:d3: f9:f6:d7:76:48:41:ee:24:1c:df:8a:96:74:bf:8f:5d:30:c6: bf:bf:3b:57:3f:c8:ef:fe:36:74:00:b3:b0:bd:3d:ae:47:d2: 03:27:6f:a3:0f:c1:96:40:f9:22:f4:31:60:b3:8b:cd:8e:05: 0c:b4:42:90:35:bb:33:fd:29:8e:4f:c1:e6:5c:25:67:66:c1: b2:1a:b9:1b:3d:83:bd:d7:16:77:5c:e6:b0:d4:cd:21:01:f1: 82:db:f7:1a:9e:55:3e:c2:10:9b:2f:9d:06:e4:ea:d0:fb:53: 38:62:e7:9f:da:9d:8e:72:a3:56:77:a3:f6:fd:78:ac:ff:4e: 7f:be:6d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNe9u8+c69xRNBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YjkwNjM2OGUtODYyOC00YmY5LWI5NmYtYzZmNzMxODhlZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbAFUu4+v/P/G+UDscMJoqs1INB5SPIsgqHH vWUpNgB7FO6A1jMKbgmOAuBWxrOf9aWKWIJG7mhksAL1a4RNzgjvW2LQtlFZKdJi gfN24CpuIU7MbHVxcR/d9coHNrqcnXUKdMKMe6yvqRyZiV/YoPSbfFzD9Gho94SN 5ON4cjGdkEkrd6PbvdBie9GLnqXeo0yQcVexiNeuM0ahGB6YiyswP9i+pGrH43Sf LmvZR9lTlkvIJJCM7f01ylmnftiDI4vyH/SElDVP1Y0oRg699CGyO8yU/Xbepb0F c8TDEshQiefEgPv3TY2UN+c8Iuo9lRykANvfnO7lku0j1w5oKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATT1VTRg3qUKTE97oF/mlWy7p8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTlmMjU5OWYtMDcwOC0z MTgwLWIzMTItMjFkNTNjZDBlZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZ6cFI78AAqBnnOJeoibZIADH2PteWmGS14sjr1nSoxaTM+Gk389t5G rLmVyHg4LaC8Dxe6jaAFY2IKRfopn93XzjUmSDg7GRQuJg5fmgy+LOgND2Ae7z3s lfLOBeYrgJiso8iw4h3wzLfVYeflFhdI0cf+Nx1RKDHh0Sb20/n213ZIQe4kHN+K lnS/j10wxr+/O1c/yO/+NnQAs7C9Pa5H0gMnb6MPwZZA+SL0MWCzi82OBQy0QpA1 uzP9KY5PweZcJWdmwbIauRs9g73XFndc5rDUzSEB8YLb9xqeVT7CEJsvnQbk6tD7 Uzhi55/anY5yo1Z3o/b9eKz/Tn++bfI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:10 2026 by rpki-client